commix

English • Ελληνικά • Español • Français • فارسی • Bahasa Indonesia • Türkçe Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command and code injection...

commix

English • Ελληνικά • Español • Français • فارسی • Bahasa Indonesia • Türkçe Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command and code injection...

CVE-2019-15107_detection

CVE-2019-15107detection This script determinate if a server is running a vulnerable version of Webmin. Webmin =1.920 command injection - CVE-2019-15107...

b374k

b374k shell 3.2 This PHP Shell is a useful tool for system or web administrator to do remote management without using cpanel, connecting using ssh, ftp etc. All actions take place within a web browser Features : File manager view, edit, rename, delete, upload, download, archiver, etc Search file,...

b374k

b374k shell 3.2 Este PHP Shell es una herramienta útil para administradores de sistemas o web para realizar gestión remota sin usar cpanel, conectarse mediante ssh, ftp, etc. Todas las acciones se realizan dentro de un navegador web. Características: Gestor de archivos ver, editar, renombrar,...

MiscTools

MiscTools CsExec Command Exec / Lateral movement via PsExec-like functionality. Must be running in the context of a privileged user. CsExec.exe Also see TikiService. CsPosh Command Exec / Lateral Movement via PowerShell. Creates a PowerShell runspace on a remote target. Must be running in the...

f5scan

f5scan F5 BIG IP Scanner for CVE-2020-5902 by bt0 More information about the Vulnerability: https://support.f5.com/csp/article/K52145254?sf235665517=1 Requirements: python3+ shodan colorama urlopen pyOpenSSL $ pip3 install -r requirements Options -h, --help show this help message and exit -H HOST...

CVE-2023-32073

WWBN AVideo currentVersion Authenticated RCE A command injection vulnerability exists at plugin/CloneSite/cloneClient.json.php which allows Remote Code Execution if you CloneSite Plugin. This is a bypass to the fix for CVE-2023-30854 which affects WWBN Avideo up to version 12.3 Vulnerable Code...

hinge-command-control-c2

Using Hinge as a Command & Control Server Please see https://mattwie.se/hinge-command-control-c2...

ESLockDecryptor

ESLockDecryptor ESLockDecryptor is a command-line tool designed to recover and decrypt files encrypted by ES File Explorer files with the .eslock extension. It supports processing both individual files and entire directories. !WARNING FOR LEGAL USE ONLY! This software is designed for educational...

Log4J-CVE-2021-44228-RCE

Log4J CVE-2021-44228 Exploit with Command Execution Interactive exploit, just run: ./exploit.sh...

Important: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

A flaw was found in Vim, an open-source command-line text editor. An attacker could craft a malicious tags file that, when processed by Vim's C omni-completion feature, leads to insufficient escaping of input. This vulnerability allows for the execution of arbitrary Ex commands and, subsequently,...

rdpscan

rdpscan for CVE-2019-0708 bluekeep vuln This is a quick-and-dirty scanner for the CVE-2019-0708 vulnerability in Microsoft Remote Desktop. Right now, there are about 900,000 machines on the public Internet vulnerable to this vulnerability, so many are to expect a worm soon like WannaCry and...

rdpscan

rdpscan para la vulnerabilidad CVE-2019-0708 bluekeep Este es un escáner rápido y sencillo para la vulnerabilidad CVE-2019-0708 en Escritorio Remoto de Microsoft. En este momento, hay alrededor de 900.000 máquinas en Internet público vulnerables a esta vulnerabilidad, por lo que muchos esperan un...

byp4xx

/ / / // / / / / / / / // /| |// |// / // / // / // / / Some cURL options you may use as example: -L follow redirections 30X responses -x : to set a proxy -m to set a timeout -H for new headers. Escape double quotes. -d for data in the POST requests body -... Built-in options: --all Verbose mode...

dnsobserver

DNSObserver Un práctico servicio DNS escrito en Go para ayudar en la detección de varios tipos de vulnerabilidades ciegas. Monitorea el servidor de un pentester en busca de interacciones DNS fuera de banda y envía notificaciones con los detalles de la solicitud recibida a través de Slack...

social-analyzer

Social Analyzer - API, CLI, and Web App for analyzing & finding a person's profile across +1000 social media \ websites. It includes different analysis and detection modules, and you can choose which modules to use during the investigation process. The detection modules utilize a rating mechanism...

CVE-2023-4450-Attack

CVE-2023-4450-Attack Herramienta automatizada para explotar la vulnerabilidad CVE-2023-4450 en JimuReport Introducción ¡Esta herramienta solo debe usarse para pruebas de seguridad, no para fines ilegales! Usage java -jar CVE-2023-4450-Attack.jar Ofrece tres funciones: ejecución de comandos, memor...

ZeroPulse

ZeroPulse A Modern Command & Control C2 Platform with Cloudflare Tunnel Integration CodeFactor 📋 Table of Contents Overview Features Architecture Prerequisites Installation Configuration Usage API Documentation Security Project Structure Development Contributing License Acknowledgments Support 🎯...